[13:43] <michael-vb> Hello.  I have just noticed that the Ubuntu kernel has adopted David Howells' lockdown patch and was wondering how one is supposed to detect that the kernel will only load signed modules.  Somewhat confusingly, /sys/module/module/parameters/sig_enforce says "N".